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Guide to the social messaging 


app Riot 
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Riot is an open source social media application that supports many 
features for easier conversation between users. It also supports all 
operating systems such as Windows, Linux, Mac, Android, iPhone, as well 
as browsers, and supports the Olm protocol to encrypt end-to-end 
conversations over servers. We do not recommend relying on it, and we 
recommend that you deal with Riot as a social media application rather 


than encrypted communication 


: (ui 


Electronic Horizons Foundation 
is an independent foundation aims to 
raise Security awareness among Muslims 
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Riot is an open source social media application that supports many features for 
easier conversation between users. It also supports all operating systems such as 
Windows, Linux, Mac, Android, iPhone, as well as browsers, and supports the Olm 
protoco| to encrypt end-to-end conversations over servers. We do not 
recommend relying on it, and we recommend that you deal with Riot as a social 
media application rather than encrypted communication 


Note: Riot is social communication application and not the application of 
encrypted communication is not recommended to use it for sending or receiving 
sensitive data 

Riot supports communicating through chat rooms and is similar to 
groups in other communication applications but has many features 
including: 

- Rooms have unlimited number of members and different room management 
functions 


- Riot uses Olm for one on one chats and Megolm for group chats. It implements 
a double ratchet key algorithm similar to Signal but is a distinct product 


- Send large size files within the room to all users 


- Customize notifications in specific form where a user can block notifications 
from specific accounts 


- Add a bot to chat rooms to customize publishing or writing 


General Alerts: 


- Use Riot as a social media application such as Facebook and Twitter and do not 
use it to send or receive sensitive data 


- Besure to use VPN or Tor network services to change the IP address and encrypt 
traffic 


- Riot encryption protocol is experimental and not tested for security. So it is not 
recommended to rely on it 


\ f^ 
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- Beware of create your account on Riot with a personal phone number or e-mail 
and use the fake numbers. 


- Ensure that apply security tutorials in the technical archive for all the devices 
that you own 


1- Signup in Riot 


e Open Riot web from your browser through this link ( https://riot.im/app ) 
e Press on create account 


LIPT-IL] 


Welcome to Riot.im! 


Decentralised, encrypted chat & collaboration powered by | matrix| 


j 
: E 2+ Create Account 
d S] 
Need help? Explore 


© Chat with Riot Bot 
a e 


Ry J 
English (US) v 


e Press on Other to change the default server 


Create your account 


free Premium Advanced 


matrix org Mi mesuiar & Over 


/ S 


Creste your Matrix account on matrix.org 
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Replace https://matrix.org server with another matrix server from the list below : 


1. https://riot.allmende.io/ 

2. https://converser.eu 

3. https://perthchat.org 

4. https://junta.pl 

5. https://hackerspaces.be 

6. https://alternanet.fr 

7. https://tchncs.de 

8. https://feneas.org 

9. https://ru-matrix.org 

10. https://matrix.sibnsk.net 
11. https://matrix.tedomum.net 
12. https://chat.privacytools.io 
13. https://matrix.allmende.io 
14. https://chat.weho.st 


e Press next 


Note ; Don't use the main server of the application Matrix.org as it is not suitable 
for use in publishing or following the news due to the continuous deletion On the 
server 


Create your account 


Premium 


2 
o 
zy 
x 


Pi moautor 
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e Enter your username and password then press on create account 


Create your account 


Premium 


W'lolu 


Pi modutor 


Create your Matrix account on matrix.org 


Password 


Email (optional) 


2- Adjust Riot Settings 


e Press On Settings 


Create your account 


(9 Settings 
D Sign out SJ 


> HISTORICAL 
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e press on permission section then Disable join / leave meassges ( to hide the 
messages of join and leave group ) 


[o cenort General 
Q rw Profile 
Q Notficstiora 


Hi Proforonces 


G Voice & Views 


®© Seourty & Privacy 


®© Hew & About 
Sot à now sccount pis sword, 
Current password 
New Password 


Confirm password 


ES 


e Disable Show avatar changes ( hide the notification of changing profile photo in 
groups ) 

e Disable Show display name changes ( hide the notification of changing display 
name ) 


Settings 
9 General Preferences 
Qu Composer 
Qi Nticutíns Use the new, faster, composer for writing messages. 
CZE y eoe pn to Emo 
% Voice & Video sab (mj suggestions Vl ping 


Pr 
® Security & Privacy $ 


Help & About 
o Timeline. 


Aatophay Gifs and videos 
Enable nine URL previews by del ah 


Enable big emoj in chat 

‘Show road receipts sent by other users 

‘Show timestamps in 12 hour format (eg. 230p) 

Always show message tenestampt. 

Show 3 placeholder for removed messages. 

Enable automatic language detection for syntax highlighting 
Show jon Mao messages [invitewicks bent unaffected) 
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e Press On Start using key backup to backup your encryption keys on the server 
and to decrypt room messages if you changed the session or the app that you 
are using 


COOL l——— ———— )eoQRMMBD, 


Settings 
© General Security & Privacy 
Q rii Devices 
O Notifications 


A device's public name is visible to people you communicate with 
H! Preferences 


& Voice & Video ID Public Name Last seen 
mm mune 
G) Help & About 
Key backup 


Your keys are not being backed up from this device. 


Encrypted messages are secured with end-to-end encryption. Only you and the 
recipient(s) have the keys to read these messages, 


Back up your keys before signing out to avoid losing them. 


Cryptography x 


Device ID; — LYARUZSMAR 


e Enter strong password then press next 


-A T 
Secure your backup with a passphrase 


Warming: you should only set up key backup from a trusted computer 


We II store an encrypted copy of your keys on our server. Protect your backup w th a passphrase to keep 


t secure, 


Far maximum security, tis should be different from your account password 


| Enter à passphrase... | 
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e Download your recovery key in encrypted folder 


à > Settinac P 


Recovery key 


Your recovery key is a safety net - you can use it to restore access to your encrypted messages if you 
forget your passphrase. 


Keep your recovery key somewhere very secure, like à password manager (or a safe) 


As a safety net, you can use it to restore your encrypted message history if you forget your Recovery 
Passphrase. 


Your Recovery Key 


W8Ut n5S8 Pbnb hj41 


e Press on Export E2E room keys to export encryption keys to a file in your phone 
and you can import it by pressing on ( Import E2E room keys ) 


(9 General 
Q Floit 
Q Notifications 


$i Preferences Device lO: Lvanu2 Sun 
Device key: gl4K kgot s*Po NTkq qxVw Ft4m v5ZZ rujC Betz tH99 x7k 
Ry, Voice & Video 


zm Soo 


© Help & About Never send encrypted messages to unverified devices from this device ©, 
Analytics 


Riot collects anonymous analytics to allow us to improve the application. Privacy is 
important to u$, so we don't Collect any persona! or identifiable data for our analytics. 
Leam more about how we use analytics. 


Send analytics data 
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3- Creating rooms and add contacts 


e Press on the add room 


© mum - 


= Explore Q Filter 


PEOPLE 


ROOMS 


e Enter room name then press create room 


Create a private room 


[S] 
| Name | 


Topic (optional) 


Make this room public e | 


This room is private, and can only be joined by invitation. 


o ERE 


Show advanced 
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e Press on invite to this room 


Today 


(© ERE ea 279 <canquees tne room 


ise here! Would you like to indie others oc sto 


e Enter the username then press send invites 


Invite new room members 


@ noui Genttcnncsde x 
Email, name oc Matrix IO. 
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Press on Room settings icon 


Q Filter room members 


e Enter the room address then press add 


Note : Room's Address should start with # then the username and the server like this 


#EHF:tchncs.de 


Room Settings - Test 


General 
Ê Security & Privacy 


hoon Name 
Test 

A Roles & Permissions 

A, Notifications 


Room Topic 
A Advanced 


Room Addresses 
Man ignes. 
net specified 


This room has no local addresses 


New address (0 
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e Ifyou want to create a join link for your room choose anyone who knows the 


room's link , apart from from guests 


Room Settings - Test 
@ Security & Privacy 
GET 4 
A, Roles & Permissions 
AX, Notifications 
& Advanced 


Once enabled, encrypbon cannot be disabled. 


Encrypted 


Who can access this room? 


Only people who have been invited 
© Anyone who knows the room's link, apart from es A 


Anyone who knows the room's fink, induding gues! 


Who can read history? 
Changes to who can read history will only apply to future messages in this room. The 
visibility of existing history will be unchanged. 
Anyone 
©) Members only (since the point in time of selecting this option) 
Members only (since they were invited) 
4 Members only (ante they joined) 


Room Settings - Test 
Security & Privacy 


Encryption 


A Roles & Permissions Once enabled. encryption cannot be disabled. 


Encrypted =) 
& Advanced = 
Never send encrypted messages to unverifed devices in this room from this ©- 


device 


JA Notifications 


Who can access this room? 


Only people who have been invited 
* Anyone who knows the room's link, apart from guests 


Anyone who knows the recons link, induding quests 


Who can read history? 
Changes to who can read history wiil only apply to future messsgesin this mom, The 
visibility of existing history vll be unchanged 
Anyone 
© Members only (since the point in time of selecting this option) 
Members only [since they were invited) 
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e Press on ok 


Room Settings - Test 
Security & Privacy 


Enable encryption? 


Once enabled, encryption for a room cannot be disabled. Messages sent in an encrypted room cannot be seen by 
the server, only by the participants of the room. Enabling encryption may prevent many bots and bridges from 


working correctly, Leam more about encryption. 
— ENEM 


(€ Members only {since the point in time of selecting this option) 
|; Members only (since they were invited) 
Members only (since they joined) 


e In Roles & Permissions section change send messages to moderate ( if you want 
to create a room for publishing only ) 

e You can change the permission of the room and the roles of the user at any time 
also this option doesn't available on Riot app in smart phones so smartphones 
users should use riot web from any browser on their phones and to activate 


desktop mode feature 


Room Settings - Test 
D General Roles & Permissions 
Ô Security & Privacy Privileged Users 


A, Notifications 
& Advanced 


oles required to change various parts of the room 
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Room Settings - Test 


General 
nawn 


& Security & Privacy Moderator 


LR. Rees & Permissions | = 


A Notifications Moderator 


A Advanced € 


Moderator 


Natty everyone 


Moderator 


Dany room rane 


Moderator 


Charge germvecet 
Admin 


[d 
Admin 


Oege n^ parens For tl etm 


Moderator 


To share the room link press on the sharing icon 


D — P 
Um š E i eimi "1 
o nited anasi AU auaurpe 
> HISTORICAL e ans IYI SUT ade 
1 xk 
o t 
o 
o AN 
o i | 
© o Q Filter room members 


w | Electronic Horizons Foundation | Q Horizons@draugr.de | o SR444TAW 


15 | Guide to the social messaging app Riot 


e Press on this link 


Share Room 


(a 


e Copy Riot link and publish it 


guisa p 


https://matrix.to/Z/!CcZbAoayxhHUPJUvZw:hackerspaces.be?via-hackerspaces.be& 
viaztchncs.de 


Matrix is an ecosystem for open and interoperable communication. 
To connect to , please select an app 


Name Descriptor Bathor Maturty Access ICcZhAoayxHUP JUvZwihackers paces be?viazhac korspoces be&vlastehnes de 
, Rig Fülyfemured — New — Stabe  hiips;foot m/apoiw 
R Tops Anctm Matrix chent for Vector E (d 
Web, OS & 
| Andros 


MaircStatic =A Stabe polang Michad Stabe hips //eevi masnx org 
ni iupszgibutroc) — generatedprevew — Telazynski T 
sac 


of public work! 
readable M orix 
rooms 


To odd chents to thes bst, please contact us or Simply Send us a pul request on gitur 
About 


DpH rooMICCZbADayxhHUP)UvZw-hackerspaces, ve?via = Fackerspaces bei via =tchncs.de «5 10 entes in te Matrix.org ecosystem without be nj tied to ary 
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e Tostart chatting with contacts on riot press on start chat 


sA EE eos stick Irrvorgve.roonvw echohackerspaces. tel v Oxo | O9 d 
Q — @ © Test e«8 Q0 | A 
= Bore Q Fiter Tamen annons | Search a| x 
note m. 
> ROOMS oÙ viie 
There are no fes in this room 
Today 


hed and configured the room. expand 
Auge all aae a 


le the oce public to whoever 


prevented guests from joining the 


Secherheckerspaces be at an 
oon, 


the main address for this room to © 
cbe 
@ © na on encrypted messag © 250 
@ Q Sens on encrypted message O A Lk Q Filter oommembers 


e Enter the username then press start chat 


Start a chat 


Who would you like to communicate with? 
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e After activating encryption in the chat or room settings as described in the past 
steps Riot will ask you to verify the devices of your contact 


y isse) @ o 9 jll s. $4880 |S 


= Explore G Fitter 
> PEOPLE o 
> ROOMS o 


Tocitv 


vated and configured the roam. expend 
vited ass IES Lal aaeuie 


algonthm m.7-egolm v1.aes«3ha2). 


LY Message not sent due to unknown devices being present 
show f niceg send anyway 9* Kanes 


Oem nervpte Zone © @ 
Qo- an encrypted c 


Q} Fitter room members 


) Q kC Q, Filter room members 


« Choose the device you want to verify then press verify 


Room contains unknown devices 


We recommend you go through the verification process for each device to confirm they belong 
to their legitimate owner, but you can resend the message without verifying if you prefer. 


Unknown devices: 
(Gehf:tchncs.de: 


@ https ot imap! via F refex on Linux (OZKOBRTPFKI 


@ IEYEOSXBOAW| 


© https fotimepp! via F refcx on Linux (HBDI PKURLSI 


@ https JHot.im/app/ via F refex on Linux (HIVIXPKLMLS) 


N 


dia 
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e Press on use legacy verification 


Verify device 


Use Legacy {for older clients) 


Verify by comparing ort text string. 


For maximum security, we recommend yòy do this in person or use another trusted meons of 
communication. 


e Press oni verify that the key match 


Verify device 


Use two-way text verification 


To verify that this device can be trusted. please contact its owner using some cther means (e.g. in person ora 
phone call) and ask them whether the key they see in their User Settings for this device matches the key below: 


E di 


H it matches, press the verify button below. If it doesn't, then someone else is intercepting this device and you 
probably want to press the Blacklist button instead. 
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3» Q ^ 2» 50 2s. 


«JS o alll dag aS lE lali 
€» HENCE TN 


| «s us alll aa». anl acies 


Q9 E] Qi Filter room members 
Y 
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Electronic Horizons Foundation room's on Riot : 


https://riot.im/app/#/room/#sr444taw:privacytools.io 


https://riot.im/app/#/room/#sr555taw:tchncs.de 


Contact us on Official Accounts to invite you to private room's and channels 


Threema : https://threema.id/SR444TAW 


Xmpp : Horizons@draugr.de 
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Horizons 


Electronic Horizons Foundation 
is an independent foundation aims to 
raise Security awareness among Muslims 


© 


Contact us on threema or XMPP to get our 
Technical Support account on telegram 


Horizons@draugr.de 


mr 


SR444TAW 


All Rights Reserved © Electronic Horizons Foundation, We don't allow copying 


any materials the foundation presents without mentioning the original source 
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